Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/D4fjlMdzoE531488p0OTA-8Nk-o.roa
File: D4fjlMdzoE531488p0OTA-8Nk-o.roa (raw, json)
Hash identifier: ZYvjH+ox9QqmVT8DocHf0I+vPA4vlzbkktR49hxKf8Q=
Subject key identifier: 0F:87:E3:94:C7:73:A0:4E:77:D7:8F:3C:A7:43:93:03:EF:0D:93:EA
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B031803BA3B2392ECBEEABB6DC1E4
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/D4fjlMdzoE531488p0OTA-8Nk-o.roa
Signing time: Thu 02 Jan 2025 09:48:54 +0000
ROA not before: Thu 02 Jan 2025 09:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 2a0d:ecc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:03:18:03:ba:3b:23:92:ec:be:ea:bb:6d:c1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f87e394c773a04e77d78f3ca7439303ef0d93ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:de:6b:4c:fc:03:81:13:00:68:14:0f:f8:
b6:ee:aa:c0:23:31:95:2d:63:79:73:81:c5:23:db:
da:29:93:e7:52:a5:0d:86:22:46:ca:09:32:68:8e:
de:97:7a:06:da:62:da:1d:95:4f:d7:d7:32:43:97:
8f:30:d5:20:5f:25:12:de:35:27:2c:73:35:90:8f:
02:fc:6c:42:28:81:ed:9d:52:b4:5b:62:cb:31:e0:
79:27:cf:02:e7:5d:c5:84:6a:f7:0e:cc:c5:95:9f:
8d:63:dd:90:f6:eb:d2:bd:32:2b:71:b7:7f:83:bd:
dc:83:58:ec:7f:53:dc:27:e2:29:9f:86:63:75:f3:
c0:1b:94:1d:02:5d:e6:f7:b6:96:18:40:89:27:4b:
4d:a6:a0:c1:ea:ee:85:ca:da:b8:67:c9:fb:71:ec:
02:0d:cf:c3:42:81:75:38:7b:cc:87:8b:bd:9b:61:
96:b5:41:2d:b2:17:f1:b2:5c:66:55:05:f4:25:f9:
6a:c5:ea:7d:44:b3:69:ec:fc:19:8d:8c:a8:a4:03:
87:24:2b:95:dd:84:9e:c8:8b:ad:fa:98:35:2c:4d:
b2:1b:6d:a7:22:94:77:6a:26:39:9a:8b:9c:96:0a:
75:41:1f:b5:3d:5a:17:49:16:68:0b:ff:c3:c8:f6:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:87:E3:94:C7:73:A0:4E:77:D7:8F:3C:A7:43:93:03:EF:0D:93:EA
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/D4fjlMdzoE531488p0OTA-8Nk-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
25:5f:aa:f0:65:31:65:fd:92:3d:f2:6e:7c:73:9e:da:cf:07:
04:9b:4a:e9:35:e1:7e:2e:54:04:0e:5c:4e:be:ab:82:b8:99:
ea:58:10:fa:20:60:eb:d3:80:02:f2:89:0b:34:c9:92:9c:a6:
7b:28:5e:ff:4a:72:e0:a0:37:4d:cb:f4:eb:de:72:50:83:95:
94:6d:e7:14:dc:b8:09:14:5c:6d:c5:0e:9c:03:f2:21:ef:33:
bb:b8:53:ee:2c:98:8d:b6:81:0d:f7:48:d6:79:29:53:49:ef:
3a:9f:85:85:4d:da:09:e2:0e:9f:ce:04:e2:ef:ea:c8:25:70:
03:d1:24:91:64:7a:60:0a:de:0d:2a:19:9e:1d:21:13:da:77:
b4:de:df:1e:bb:7c:21:e0:ca:51:97:7a:2d:e1:ff:6c:29:e9:
2e:ff:8c:bb:76:fc:65:fd:a4:c7:1c:96:11:79:e4:9d:08:38:
e3:41:63:84:8a:0b:fd:71:60:c4:f4:92:ed:98:c6:ff:ec:c6:
f8:bd:d6:ff:cf:0a:23:c8:d4:a6:ab:db:32:50:0a:e6:41:34:
5d:d5:50:fe:d7:de:e5:31:97:32:2b:78:a8:5b:9a:ba:6b:38:
c7:24:10:99:fa:37:ce:68:3c:ad:72:84:d5:52:c8:40:c7:4a:
60:36:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:29:06 2025 by rpki-client